Method and system for controlling access to objects in a data processing system based on temporal constraints

摘要

Access by a security subject to an object on a data processing system is automatically controlled in accordance with a time based schedule. In accordance with times contained in the schedule, an access control list of an object is modified by either adding, to invoke access, or deleting, to revoke access, a security subject. The schedule is made up of one or more requests for single access or cyclical accesses that are stored in a request queue. The request queue is periodically polled to determine if any requests qualify for further processing. A request is processed if the time for changing the status of the security subject on the access control list, as specified by the request, is either the same as or less than the current time of the data processing system. Processing the request modifies the access control list by either adding or deleting the security subject to or from the access control list.